diff --git a/CMakeLists.txt b/CMakeLists.txt
index ac8a001..9366412 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -14,6 +14,7 @@ find_package(Tarantool REQUIRED)
 
 set(STATIC_BUILD "OFF" CACHE BOOL "Link dependencies statically?")
 set(WITH_OPENSSL_1_1 "OFF" CACHE BOOL "Require openssl version >= 1.1?")
+set(WITH_GSSAPI "OFF" CACHE BOOL "Enable Kerberos (GSSAPI) support")
 set(ENABLE_ASAN "OFF" CACHE BOOL "Enable ASAN")
 set(ENABLE_UBSAN "OFF" CACHE BOOL "Enable UBSAN")
 
@@ -47,6 +48,10 @@ if (APPLE)
     set(LIBRDKAFKA_C_FLAGS "${LIBRDKAFKA_C_FLAGS} ${CMAKE_C_SYSROOT_FLAG} ${CMAKE_OSX_SYSROOT}")
 endif()
 
+if (WITH_GSSAPI)
+    set(LIBRDKAFKA_FLAGS ${LIBRDKAFKA_FLAGS} --enable-gssapi)
+endif()
+
 if(STATIC_BUILD)
     include(ExternalProject)
     set(PATCHES_DIR "${CMAKE_SOURCE_DIR}/patches")
diff --git a/kafka-scm-1.rockspec b/kafka-scm-1.rockspec
index e90c67d..f65926b 100644
--- a/kafka-scm-1.rockspec
+++ b/kafka-scm-1.rockspec
@@ -27,6 +27,7 @@ build = {
         STATIC_BUILD="$(STATIC_BUILD)",
         ENABLE_ASAN="$(ENABLE_ASAN)",
         ENABLE_UBSAN="$(ENABLE_UBSAN)",
-        WITH_OPENSSL_1_1="$(WITH_OPENSSL_1_1)"
+        WITH_OPENSSL_1_1="$(WITH_OPENSSL_1_1)",
+        WITH_GSSAPI="$(WITH_GSSAPI)",
     }
 }